{
"event": "PreToolUse",
"tool_name": "Bash",
"tool_input": {
"command": "ssh root@prod.karlkratz.com \"cat \/etc\/fail2ban\/action.d\/nftables.conf 2>\/dev\/null | grep -E 'actionban|actionstart|actionstop|chain|table|nft_set|nft ' | head -30\" 2>&1",
"timeout": 15000,
"description": "Read nftables action config"
}
}
{
"tool_response": {
"stdout": "# \t\t\tmade active on all ports from original iptables.conf\n# adapted for nftables\n# This is a included configuration file and includes the definitions for the nftables\n# used in all nftables based actions by default.\n# The user can override the defaults in nftables-common.local\n# table_family = ip\n# chain_type = nat\n# chain_hook = prerouting\n# chain_priority = -50\nafter = nftables-common.local\n# Notes.: statement for nftables filter rule.\n# Values: nftables statement\n_nft_list = <nftables> -a list chain <table_family> <table> <chain>\n_nft_add_set = <nftables> add set <table_family> <table> <addr_set> \\{ type <addr_type>\\; \\}\n <nftables> add rule <table_family> <table> <chain> %(rule_stat)s\n <nftables> delete rule <table_family> <table> <chain> $hdl; done\n <nftables> delete set <table_family> <table> <addr_set>\n# Option: _nft_shutdown_table\n# Notes.: command executed after the stop in order to delete table (it checks that no sets are available):\n_nft_shutdown_table = { <nftables> list table <table_family> <table> | grep -qP '^\\s+set\\s+'; } || {\n <nftables> delete table <table_family> <table>\n# Option: actionstart\n# Notes.: command executed on demand at the first ban (or at the start of Fail2Ban if actionstart_on_demand is set to false).\nactionstart = <nftables> add table <table_family> <table>\n <nftables> -- add chain <table_family> <table> <chain> \\{ type <chain_type> hook <chain_hook> priority <chain_priority> \\; \\}\n# uses `nft flush set ...` and as fallback (e. g. unsupported) recreates the set (with references)\nactionflush = { <nftables> flush set <table_family> <table> <addr_set> 2> \/dev\/null; } || {\n# Option: actionstop\nactionstop = %(_nft_del_set)s\n <_nft_shutdown_table>",
"stderr": "",
"interrupted": false,
"isImage": false,
"noOutputExpected": false
}
}